This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

All sites being blocked for one user after upgrade to 7.5

I upgraded from 7.405 to 7.5 last night.

This morning one of my users can't visit any web sites.

The Content Filter logs show:

2009:10:07-09:21:30 astaro1-2 httpproxy[5061]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.55" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2170" time="0 ms" request="0x88e5568" url="74.125.127.100/favicon.ico" exceptions="" error="" category="9999" reputation="neutral" categoryname="Categorization failed"
2009:10:07-09:21:50 astaro1-1 httpproxy[5572]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="" srcip="192.168.1.30" user="" statuscode="400" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction=" ()" size="2118" time="0 ms" request="0xa66054f0" url="" exceptions="" error=""
2009:10:07-09:21:52 astaro1-2 httpproxy[5061]: [ (nil)] sc_resolve_server (scr_scanner.c:355) DNS: cffs01.astaro.com: Temporary failure in name resolution
2009:10:07-09:21:52 astaro1-2 httpproxy[5061]: [ (nil)] sc_resolve_server (scr_scanner.c:355) DNS: cffs02.astaro.com: Temporary failure in name resolution
2009:10:07-09:21:52 astaro1-2 httpproxy[5061]: [ (nil)] sc_resolve_server (scr_scanner.c:355) DNS: cffs03.astaro.com: Temporary failure in name resolution
2009:10:07-09:21:52 astaro1-2 httpproxy[5061]: [ (nil)] sc_resolve_server (scr_scanner.c:355) DNS: cffs04.astaro.com: Temporary failure in name resolution
2009:10:07-09:21:53 astaro1-2 httpproxy[5061]: [ (nil)] sc_resolve_server (scr_scanner.c:355) DNS: cffs05.astaro.com: Temporary failure in name resolution
2009:10:07-09:21:53 astaro1-2 httpproxy[5061]: [ 0x88e8ad0] sc_categorize_url (scr_scanner.c:940) no categorization received for url: http://yahoo.com/
2009:10:07-09:21:53 astaro1-2 httpproxy[5061]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.55" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2130" time="7 ms" request="0x88e8ad0" url="yahoo.com/" exceptions="" error="" category="9999" reputation="neutral" categoryname="Categorization failed"
This might be related to my other error for which I keep getting email notifications:

The spam filter daemon is unable to reach the database servers via HTTP. Please make sure that the device is able to send HTTP (TCP port 80) requests to the Internet. You may have to allow such traffic on upstream devices.
Any ideas how to fix this?

Thanks,

James.


This thread was automatically locked due to age.
Parents
  • Allowed Networks = IPs of Internal Name Servers

    OpenDNS and, after that. your ISP's name servers?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Allowed Networks = IPs of Internal Name Servers

    OpenDNS and, after that. your ISP's name servers?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Also,
    The DNS's network settings have Astaro as the gateway - is this enough or do I have to change some BIND settings?

    In the Windows world, there's an explicit "forwarders" setting that needs to be set.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA